VPN - PPTP vs L2TP

Can I get some opinion on PPTP vs L2TP VPN on Server 2003 for a small
business?

I originally thought L2TP with a pre-shared key would be best, but then I
found this:

"PPTP using MS-CHAPv2 or EAP-TLS authentication is more secure than L2TP
with pre-shared key authentication".

Any thoughts appreciated.
Russell.

I beleive L2TP is more secure. Quoted from Microsoft:

· PPTP connections require only user-level authentication through a
PPP-based authentication protocol. L2TP/IPSec connections require the same
user-level authentication and, in addition, computer-level authentication
using computer certificates.


Also check this search result.

Which one is better, L2TP or PPTPA: PPTP is comparatively less secure than
L2TP because L2TP does per packet authentication and integrity check using
IPSec. But PPTP is easy to deploy. ...
www.chicagotech.net/Q&A/vpn45.htm

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"Russella" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Can I get some opinion on PPTP vs L2TP VPN on Server 2003 for a small
> business?
>
> I originally thought L2TP with a pre-shared key would be best, but then I
> found this:
>
> "PPTP using MS-CHAPv2 or EAP-TLS authentication is more secure than L2TP
> with pre-shared key authentication".
>
> Any thoughts appreciated.
> Russell.
>

Hi Russella,

L2TP has several advantages over PPTP, as you can see here:
http://www.windowsecurity.com/articles/VPN-Options.html

--
Have a nice day!
Masterplan - MCSE,MCITP-EA
http://winmasterplan.blogspot.com


"Russella" wrote:

> Can I get some opinion on PPTP vs L2TP VPN on Server 2003 for a small
> business?
>
> I originally thought L2TP with a pre-shared key would be best, but then I
> found this:
>
> "PPTP using MS-CHAPv2 or EAP-TLS authentication is more secure than L2TP
> with pre-shared key authentication".
>
> Any thoughts appreciated.
> Russell.
>
>
>

I think what you read is wrong.

Both use MS-CHAPv2 or EAP-TLS authentication.

L2TP uses IPSec based encryption on top of that.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------


"Russella" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Can I get some opinion on PPTP vs L2TP VPN on Server 2003 for a small
> business?
>
> I originally thought L2TP with a pre-shared key would be best, but then I
> found this:
>
> "PPTP using MS-CHAPv2 or EAP-TLS authentication is more secure than L2TP
> with pre-shared key authentication".
>
> Any thoughts appreciated.
> Russell.
>

Agree.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"Phillip Windell" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
>I think what you read is wrong.
>
> Both use MS-CHAPv2 or EAP-TLS authentication.
>
> L2TP uses IPSec based encryption on top of that.
>
> --
> Phillip Windell
> www.wandtv.com
>
> The views expressed, are my own and not those of my employer, or
> Microsoft,
> or anyone else associated with me, including my cats.
> -----------------------------------------------------
>
>
> "Russella" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Can I get some opinion on PPTP vs L2TP VPN on Server 2003 for a small
>> business?
>>
>> I originally thought L2TP with a pre-shared key would be best, but then I
>> found this:
>>
>> "PPTP using MS-CHAPv2 or EAP-TLS authentication is more secure than L2TP
>> with pre-shared key authentication".
>>
>> Any thoughts appreciated.
>> Russell.
>>
>
>

"Robert L. (MS-MVP)" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Agree.

Thanks Bob!


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------